Privacy Policy

Last updated: December 2025

ReclaimFBA takes your privacy and security extremely seriously. We only access the absolute minimum Amazon data required to find and recover money owed to you.

1. What We Collect

Your Amazon Seller Central OAuth refresh token (encrypted at rest with AES-256)
Your store name and marketplace IDs (e.g., Amazon.com, Amazon.co.uk)
FBA inventory, shipment, returns, removals, and financial reports via Amazon's official Selling Partner API
Billing email and Stripe customer ID for subscription management

2. What We NEVER Collect

Your Amazon login credentials or password
Buyer names, addresses, emails, or any PII
Credit card details (handled 100% by Stripe)
Product titles, images, or listing content

3. How We Use Your Data

We only use Amazon data to:

Scan for lost/damaged inventory, unreceived returns, overcharged fees, etc.
Calculate exact reimbursement amounts owed by Amazon
Generate or file reimbursement cases on your behalf (only if you opt in)

Note: All processing happens server-side and is deleted from memory immediately after use.

4. Data Storage & Security

Refresh tokens are encrypted at rest and never logged
Database is hosted on Supabase with SOC 2 Type II compliance
All connections use TLS 1.3 encryption in transit
We maintain strict role-based access (only the founder can view tokens)
No data is ever sold, shared, or used for advertising

5. Data Deletion

When you cancel your subscription or request deletion:

Your refresh token is immediately revoked with Amazon
All stored Amazon data is permanently deleted within 24 hours
You can request deletion anytime at support@reclaimfba.net

6. Third Parties

We only share data with:

Amazon (via official SP-API to retrieve reports and file cases)
Stripe (for subscription billing only)
Supabase (encrypted database provider)

7. Contact

Questions? Email support@reclaimfba.net — we reply within 24 hours.

By using ReclaimFBA, you agree to this privacy policy.